CVE & CISA-KEV Catalog

CVE-2019-1385

HIGHCISA KEVEPSS 88th pctl
7.8
CVSS v3
NVD

Description

An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.To exploit this vulnerability, an authenticated attacker would need to run a specially crafted application to elevate privileges.The security update addresses the vulnerability by correcting how AppX Deployment Extensions manages privileges., aka 'Windows AppX Deployment Extensions Elevation of Privilege Vulnerability'.

How to fix

Actively exploited, no published fix found yet

CISA required action: Apply updates per vendor instructions.

Federal remediation due: 2022-06-13

Known ransomware campaign use

Mitigation guidance may be in the linked vendor advisories in the References section below.

TridentStack Control tracks known vulnerabilities across your Windows, macOS, and Linux fleet and shows the fix as soon as one is published. See how it works

CVSS v3 Vector

Exploitability

Attack VectorLocal
Attack ComplexityLow
Privileges RequiredLow
User InteractionNone
ScopeUnchanged

Impact

ConfidentialityHigh
IntegrityHigh
AvailabilityHigh

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploit Intelligence

3.60%probability of exploitation in 30 days
88thpercentile

Elevated risk: more likely to be exploited than 88% of all known CVEs.

Known Exploited Vulnerability (CISA KEV)

Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability

A privilege escalation vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.

Apply updates per vendor instructions.

Remediation due: 2022-06-13

Associated with ransomware campaigns

References

Third-Party Advisory1
Government Resource1

Related Vulnerabilities

Other CWE-59 (Link Following) vulnerabilities, ordered by exploit likelihood. View all

CVESeverityCVSSEPSSExploitedFix
CVE-2022-30333High7.599%KEV + RansomFix
CVE-2021-21300High8.089%-Fix
CVE-2021-32610High7.173%-Fix
CVE-2020-36193High7.571%KEVFix
CVE-2023-40028Medium4.958%-Fix
CVE-2023-36874High7.843%KEVFix
Embed a live status badge for CVE-2019-1385
CVE-2019-1385 severity badge

Markdown

[![CVE-2019-1385](https://tridentstack.com/cve/badge/CVE-2019-1385.svg)](https://tridentstack.com/cve/CVE-2019-1385)

HTML

<a href="https://tridentstack.com/cve/CVE-2019-1385"><img src="https://tridentstack.com/cve/badge/CVE-2019-1385.svg" alt="CVE-2019-1385"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

See how it worksStart freeThis CVE lookup is free and always will be.

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2025-10-29.